CVE-2025-50130

CVSS 8.4 HIGHEPSS 0.2%CWE-122

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 jul 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · TELLUS FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT-6

Referências

https://jvn.jp/en/vu/JVNVU94011267/https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.php https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php